As soon as Meri-Tuuli Auer saw the subject line in her junk folder, she knew it was no ordinary spam email. It contained her full name and social security number, and detailed personal information about her therapy sessions stolen from Vastaamo, a Finnish psychotherapy provider. Auer was one of 33,000 patients targeted by a hacker who threatened to release sensitive therapy records unless a ransom was paid.

This incident became Finland's largest cybercrime scandal, prompting urgent discussions at the governmental level. The hacker had already published confidential notes on the dark web before Auer received the ransom email, striking panic and fear among many patients.

Despite initial fear and isolation, Auer demonstrated incredible resilience. She confronted her anxieties head-on, posted about her experience on social media, and eventually published a book to reclaim her narrative. This case highlights the critical need for enhanced cybersecurity measures to protect personal mental health information.